Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/jeUfXN-UANDazJ0Ke7aoqknlMh8.roa
File: jeUfXN-UANDazJ0Ke7aoqknlMh8.roa (raw, json)
Hash identifier: 8AYyZDTMaCz4BL0HOsGvTywVt0HA6PnMIz4jGkJ7DKU=
Subject key identifier: 8D:E5:1F:5C:DF:94:00:D0:DA:CC:9D:0A:7B:B6:A8:AA:49:E5:32:1F
Certificate issuer: /CN=b478410224904494e9c0f7d35650a260e5fb6193
Certificate serial: 0192F62B8AA5642A10E0AF47BA7B36E99294
Authority key identifier: B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/jeUfXN-UANDazJ0Ke7aoqknlMh8.roa
Signing time: Mon 04 Nov 2024 07:55:01 +0000
ROA not before: Mon 04 Nov 2024 07:55:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21060
IP address blocks: 80.82.96.0/20 maxlen: 20
80.89.16.0/20 maxlen: 20
80.89.18.0/23 maxlen: 23
80.89.30.0/24 maxlen: 24
91.195.58.0/23 maxlen: 23
91.213.70.0/24 maxlen: 24
92.43.232.0/21 maxlen: 21
185.134.252.0/22 maxlen: 22
185.155.36.0/22 maxlen: 22
188.244.64.0/20 maxlen: 20
194.8.244.0/23 maxlen: 23
2a02:7c00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f6:2b:8a:a5:64:2a:10:e0:af:47:ba:7b:36:e9:92:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b478410224904494e9c0f7d35650a260e5fb6193
Validity
Not Before: Nov 4 07:55:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8de51f5cdf9400d0dacc9d0a7bb6a8aa49e5321f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:df:07:51:32:49:e1:33:f3:fb:9e:c4:26:39:
13:1d:6b:68:e0:c6:01:8d:88:0b:f0:f7:5d:72:75:
31:8e:d6:d2:0d:c5:29:08:67:22:83:19:f7:b7:71:
45:76:cb:2b:dc:6b:ab:87:51:90:8f:88:0e:dc:53:
09:e9:ad:bf:8a:a5:3f:14:c6:b1:9b:66:31:e3:31:
9c:86:61:eb:82:e7:1f:38:89:fb:e4:a2:0f:5e:c6:
92:ed:3b:13:8b:4e:15:56:10:32:46:5d:f4:4d:4b:
a0:3e:bb:1a:66:07:48:30:6b:78:2b:68:c2:f5:87:
df:15:85:e8:98:94:8d:eb:59:31:43:4d:c1:5c:65:
b5:32:05:77:d0:b7:d3:6b:81:b9:a7:90:58:5d:54:
40:b0:e1:d2:5a:3b:51:bb:d2:f8:44:83:29:3b:c4:
e0:4c:30:3d:c3:7d:3f:b5:e8:62:97:c1:f0:73:e9:
bd:e3:18:76:03:08:d0:96:79:3a:f3:d5:12:7a:d8:
e4:ac:43:8a:99:8f:e8:31:86:21:5e:16:31:02:82:
65:63:59:ca:25:29:ad:e5:4a:4e:f5:d3:4a:18:3b:
8f:54:6a:80:2b:08:b9:87:fd:4a:94:9c:4f:13:24:
43:09:a0:22:9f:f7:c3:49:c7:4c:ed:0b:e5:5c:1b:
eb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E5:1F:5C:DF:94:00:D0:DA:CC:9D:0A:7B:B6:A8:AA:49:E5:32:1F
X509v3 Authority Key Identifier:
keyid:B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/jeUfXN-UANDazJ0Ke7aoqknlMh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.82.96.0/20
80.89.16.0/20
91.195.58.0/23
91.213.70.0/24
92.43.232.0/21
185.134.252.0/22
185.155.36.0/22
188.244.64.0/20
194.8.244.0/23
IPv6:
2a02:7c00::/32
Signature Algorithm: sha256WithRSAEncryption
42:81:de:24:2b:62:e1:14:e0:ff:04:8c:44:b8:2f:05:a2:0a:
60:30:6a:3c:34:17:97:ca:90:83:47:00:da:22:48:2b:1a:b4:
cc:55:53:b6:fd:99:1a:a2:b6:83:11:1e:f5:08:6d:25:70:30:
aa:69:34:2e:96:be:59:a4:e4:6b:cd:2a:80:17:f1:28:5b:0a:
7e:4a:3b:84:bd:37:80:ba:56:f4:a3:6c:13:22:5f:99:b3:7f:
bf:5f:39:b5:07:30:ef:aa:b1:10:1c:9b:c0:38:2e:3a:f2:32:
c3:5a:b4:9f:9e:1d:dd:75:fa:e1:1b:92:40:d2:69:af:34:41:
b1:2f:53:e1:61:f2:39:a9:28:c6:47:a1:ef:0c:d3:ac:4b:cb:
8a:8e:65:92:5a:02:94:8d:86:81:a6:80:86:4e:cd:18:a7:2d:
b9:9d:ad:95:93:40:39:3b:96:8f:4e:04:e1:d1:83:ce:7a:b9:
5f:43:ac:9b:9a:d0:97:3f:2d:3d:4a:d4:89:bc:11:06:96:1c:
98:f3:a6:90:7e:7e:26:73:73:1c:20:23:a2:d2:f5:d2:13:4f:
1b:7f:65:da:74:40:ac:f7:9d:ff:5c:73:2f:bf:a6:e2:09:1c:
d1:da:18:1e:da:fd:96:10:f9:d8:7b:53:3d:fc:86:0f:53:0a:
d6:fc:81:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:39:07 2024 by rpki-client on console-ams.rpki-client.org